System and method to make a fuel tank inert

ABSTRACT

A method and system used to make a fuel tank inert that includes a chiller assembly coupled in flow communication with a vehicle fuel tank, and a system controller assembly operatively coupled to the chiller assembly. More specifically, the chiller assembly includes a pump configured to extract a quantity of a fluid from the vehicle fuel tank, and an evaporator configured to receive a flow of the extracted quantity of fluid from the pump and further configured to reduce a temperature of the fluid. The chiller assembly also includes a chiller controller configured to activate and deactivate the pump. The system controller assembly is operatively coupled to chiller controller, wherein the system controller assembly is configured to transmit to the chiller controller one of a start signal to start chiller operations or a stop signal to stop chiller operations.

BACKGROUND

The field of the disclosure relates generally to fuel systems and, more particularly, to methods and systems for enhancing fuel tank safety.

Some known fuel tanks have a liquid fuel containing region and an ullage region that typically contains a mixture of air and evaporated fuel (i.e. fuel vapor) that defines an fuel/air ratio within the ullage. Ignition of the fuel/air mixture within the ullage may occur, in the presence of an ignition source, when the concentration of fuel vapors (i.e. fuel/air ratio) in the ullage lies within a certain range, commonly known as a combustion supporting range, an unsafe region or a non-inert region. More specifically, the lower flammability limit of the ullage is defined as a threshold where the fuel/air ratio is too lean and will not ignite. Additionally, the upper flammability limit of the ullage is defined as the threshold above which the fuel vapor/air mixture is too rich to ignite. The lower limit represents the minimum fuel vapor/air mixture concentration that will ignite, while the upper limit represents the maximum fuel vapor/air mixture concentration that will support combustion. A combustion supporting region for a fuel/air mixture is defined between the lower limit concentration and the upper limit concentration. The mixture generally is not combustible outside of this region.

Under typical operating conditions, for example temperatures less than 100° F. at sea level, the fuel/air mixture concentration for Jet A fuel lies outside of the inert region and therefore is generally not combustible. However, there are a number of known events that may cause the inert fuel/air mixture within the ullage region of the fuel tank to enter the unsafe region. These circumstances may include, for example, a rapid reduction in tank ullage pressure after take off, i.e. when the aircraft reaches a high altitude in a short time with the fuel still at the temperature that existed at take-off (for example, 98° F.). This may cause the ullage fuel vapor/air mixture concentration to enter the unsafe region at the higher altitude.

Recent Federal Aviation Administration (FAA) Regulations require that new transport aircraft include systems for enhancing the safety of aircraft fuel tanks. One known system for increasing the reliability of aircraft fuel tanks is to utilize an “inerting system” that channels an inert gas, such as nitrogen, into the fuel tank to reduce the oxygen concentration therein. The inert gas may be generated on-board using, for example, high pressure bleed air from an engine compressor or an auxiliary power unit compressor. In either case, the high pressure air flows through equipment that removes contaminants and moisture, and conditions the air to pressures and temperatures required by the air separation modules that separate the air into an oxygen-rich component that is exhausted from the aircraft and an oxygen-depleted or inert gas component that flows into the fuel tank. Such a system is expensive to install on an aircraft, significantly increases the weight of the vehicle, and also may not be reliable during operation. Inerting systems, in general, vent fuel vapor-laden ullage gases to the outside ambient when supplying oxygen-depleted or inert gas to the fuel tank. Additionally, aircraft descent rate may impact inerting system design, wherein a high descent rate may require a high inert gas flow to limit or prevent outside air from entering the fuel tank to maintain the inert state of the fuel tank. This may require large quantities of bleed air to be channeled to the on-board inert gas generating system.

Another known system for enhancing the safety of a fuel tank is to maintain the fuel tank at a relatively low temperature that facilitates preventing fuel vaporization and hence formation of fuel vapors in the fuel tank. One known method for doing so involves using an air conditioning system to displace warm air surrounding the fuel tank.

SUMMARY

In one aspect, a fuel tank safety system is provided. The system includes a chiller assembly coupled in flow communication with a vehicle fuel tank, and a system controller assembly operatively coupled to the chiller assembly. More specifically, the chiller assembly includes a pump configured to extract a quantity of a fluid from the vehicle fuel tank, and an evaporator configured to receive a flow of the extracted quantity of fluid from the pump and further configured to reduce a temperature of the fluid. The chiller assembly also includes a chiller controller configured to activate and deactivate the pump. The system controller assembly is operatively coupled to chiller controller, wherein the system controller assembly is configured to transmit to the chiller controller one of a start signal to start chiller operations or a stop signal to stop chiller operations.

In another aspect, a vehicle is provided. The vehicle includes a fuel tank, and a fuel tank safety system operatively coupled to the fuel tank. The fuel tank safety system includes a chiller assembly coupled in flow communication with a vehicle fuel tank, and a system controller assembly operatively coupled to the chiller assembly. More specifically, the chiller assembly includes a pump configured to extract a quantity of a fluid from the vehicle fuel tank, and an evaporator configured to receive a flow of the extracted quantity of fluid from the pump and further configured to reduce a temperature of the fluid. The chiller assembly also includes a chiller controller configured to activate and deactivate the pump. The system controller assembly is operatively coupled to chiller controller, wherein the system controller assembly is configured to transmit to the chiller controller one of a start signal to start chiller operations or a stop signal to stop chiller operations.

In yet another aspect, a method for enhancing the safety of a fuel system is provided. The method includes channeling a quantity of ullage gas from the fuel tank, reducing a temperature of the extracted quantity of ullage gas, and returning the reduced temperature ullage gas into the fuel tank.

BRIEF DESCRIPTION OF THE DRAWINGS

Non-limiting and non-exhaustive embodiments are described with reference to the following figures, wherein like reference numerals refer to like parts throughout the various views unless otherwise specified.

FIG. 1 is a flow diagram of an exemplary aircraft production and service methodology.

FIG. 2 is a system block diagram of the aircraft shown in FIG. 1.

FIG. 3 is an internal perspective view of an exemplary aircraft with an exemplary aircraft fuel system.

FIG. 4 is a graph illustrating a fuel/air ratio of the non-inert region as a function of altitude for an exemplary fuel used to power the exemplary aircraft shown in FIG. 3.

FIG. 5 is a graph illustrating the non-inert region in term so of temperature as a function of the altitude for an exemplary fuel used to power the exemplary aircraft shown in FIG. 3.

FIG. 6 is a graph illustrating the non-inert region in terms of fuel temperature as a function of the altitude for an exemplary fuel tank inert system used on the exemplary aircraft shown in FIG. 3.

FIG. 7 is a schematic illustration of an exemplary system used to make the exemplary fuel tank inert, such as the fuel tank on the exemplary aircraft shown in FIG. 3.

FIG. 8 is a graph illustrating system relevant temperatures as a function of fuel tank pressure for an exemplary fuel.

FIG. 9 is a schematic illustration of a user interface used with the system illustrated in FIG. 7.

FIG. 10 is a schematic illustration of an alternative system used to make the fuel tank inert.

FIG. 11 is a schematic illustration of another alternative fuel tank safety system.

DETAILED DESCRIPTION

Referring more particularly to the drawings, embodiments of the disclosure may be described in the context of an aircraft manufacturing and service method 100 as shown in FIG. 1 and an aircraft 102 as shown in FIG. 2. During pre-production, exemplary method 100 may include specification and design 104 of the aircraft 102 and material procurement 106. During production, component and subassembly manufacturing 108 and system integration 110 of the aircraft 102 takes place. Thereafter, the aircraft 102 may go through certification and delivery 112 in order to be placed in service 114. While in service by a customer, the aircraft 102 is scheduled for routine maintenance and service 116 (which may also include modification, reconfiguration, refurbishment, and so on).

Each of the processes of method 100 may be performed or carried out by a system integrator, a third party, and/or an operator (e.g., a customer). For the purposes of this description, a system integrator may include without limitation any number of aircraft manufacturers and major-system subcontractors; a third party may include without limitation any number of vendors, subcontractors, and suppliers; and an operator may be an airline, leasing company, military entity, service organization, and so on.

As shown in FIG. 2, the aircraft 102 produced by exemplary method 100 may include an airframe 118 with a plurality of systems 120 and an interior 122. Examples of high-level systems 120 include one or more of a propulsion system 124, an electrical system 126, a hydraulic system 128, and an environmental system 130. Any number of other systems may be included. Although an aerospace example is shown, the principles of the disclosure may be applied to other industries.

Apparatus and methods embodied herein may be employed during any one or more of the stages of the production and service method 100. For example, components or subassemblies corresponding to production process 108 may be fabricated or manufactured in a manner similar to components or subassemblies produced while the aircraft 102 is in service. Also, one or more apparatus embodiments, method embodiments, or a combination thereof may be utilized during the production stages 108 and 110, for example, by substantially expediting assembly of or reducing the cost of an aircraft 102. Similarly, one or more of apparatus embodiments, method embodiments, or a combination thereof may be utilized while the aircraft 102 is in service, for example and without limitation, to maintenance and service 116.

FIG. 3 is an internal perspective view of an aircraft 200 that includes an exemplary aircraft fuel system 202. Aircraft fuel system 202 includes a first fuel tank 204 and a second fuel tank 206 positioned proximate to respective wings 208, 210 of aircraft 200, and a center fuel tank 212 positioned within an aircraft fuselage 214. Alternatively, aircraft 200 may have any fuel tank configuration to allow aircraft 200 to function as described herein. In the exemplary embodiment, first fuel tank 204, second fuel tank 206 and center fuel tank 212 each include an exemplary inerting system 300 for use in maintaining a quantity of fuel and ullage within each fuel tank at a “safe temperature”, as described in more detail herein. Alternatively, a single inerting system 300 may be used for all fuel tanks 204, 206, 212 aboard aircraft 200. Aircraft 200 includes a vehicle processor 216 that is programmed with flight data and applicable environmental conditions, such as for example, ambient pressure conditions, as is described in more detail herein.

As provided herein, a “safe temperature” is a temperature at or below which the ullage of the fuel tank in contact with fuel is inert considering all probable operational effects. Safe temperatures may also be temperatures at or below which fuels are incapable of generating non-inert fuel/air ratios. Safe temperatures are generally equal to or less than a fuel lower flammability limit (LFL) temperatures, as described herein. Safe temperatures lower than LFL temperatures may be selected to provide “higher” level of safety, to account for factors such as fuel tank fuel mass loading, fuel sloshing, for fuel composition variability, dissolved oxygen, etc., or any other factor that may influence fuel tank safety.

FIG. 4 is a graph 400 illustrating a fuel/air ratio of the non-inert region as a function of altitude for an exemplary fuel used to power exemplary aircraft 200 shown in FIG. 3. FIG. 5 is a graph 500 illustrating the non-inert region in terms of fuel temperature as a function of altitude for ullage in thermal equilibrium with liquid fuel in the tank. FIG. 4 shows a lower (or lean) flammability limit (LFL) 410, and an upper (or rich) flammability limit (UFL) 420 for an exemplary fuel tank. In the exemplary embodiment, an ullage gas in thermal equilibrium with liquid fuel is only non-inert within a defined fuel-air ratio region 430. More specifically and as shown in FIG. 4, ullage gas is inert when the fuel-air ratio is greater than the UFL, illustrated in region 440, and when the fuel-air ratio is less than the LFL, illustrated in region 450. Similarly, FIG. 5 shows a lower (or lean) flammability limit (LFL) 510, and an upper (or rich) flammability limit (UFL) 520 for an exemplary fuel tank. In the exemplary embodiment, an ullage gas is non-inert within a defined temperature region 530. More specifically and as shown in FIG. 5, ullage gas is inert when the temperature is greater than the UFL, illustrated in region 540, and when the temperature is less than the LFL, illustrated in region 550.

FIG. 6 is a graph 600 illustrating the UFL 610 and LFL 620 for an exemplary fuel. In the exemplary embodiment, there are two circumstances illustrated wherein a fuel tank may become less safe under operational conditions. In the first instance, the fuel tank may become unsafe during heating of the fuel tank caused by internal or external heat sources 630. The fuel tank ullage is initially inert, at conditions denoted by point O, at a temperature of approximately 70° F., and at an altitude of 2,000 feet (ft) (i.e., field altitude). Fuel may become non-inert under certain conditions, for example, when the fuel tank is heated 630 by internal or external sources (line OZ), such as when the ullage enters the non-inert region 660 region as the fuel/air ratio increases upon heating of the fuel or fuel tank.

Additionally, while the fuel tank that is generally in an inert condition at takeoff, as described herein, fuel tank may become less safe if the fuel tank is unable to dissipate internal heat as the airplane climbs and as the fuel tank pressure decreases, shown as line 640. The characteristic line 640 crosses the LFL 620 at approximately 23,500 feet 650 and the ullage characteristics falls within the non-inerting region 660. The ullage becomes less safe, as shown in FIG. 6, because fuel vapor/air mixtures may ignite at high altitudes in the presence of an ignition source. The above processes (heating 630 and/or insufficient heat dissipation during climb 640) by which the ullage becomes non-inert are reversible. That is a fuel tank that is initially non-inert can be rendered inert by cooling and/or by pressurization.

FIG. 7 is a schematic illustration of an exemplary system 700 used on exemplary aircraft 200 shown in FIG. 3. System 700 is one exemplary embodiment of system 300 shown in FIG. 3. In the exemplary embodiment, system 700 includes a chiller assembly 702 coupled in flow communication with a vehicle fuel tank 704 via an inlet conduit 706 and an outlet conduit 708. Inlet conduit 706 is electrically grounded via a grounding strap 710. Similarly, outlet conduit 708 is electrically grounded via a grounding strap 712. Each ground 710, 712 facilitates preventing a build up of static electricity within system 700. In the exemplary embodiment, system 700 includes a system controller 720 communicatively coupled to chiller assembly 702, and more specifically, to a chiller controller 722 that operates chiller assembly 702, as described in more detail below.

Fuel tank 704 includes a fuel region 724 that contains a quantity of fuel 726, and an ullage region 728 that contains a mixture of fuel and air 730 (referred to herein as “ullage gas”). In the exemplary embodiment, fuel tank 704 includes a fuel temperature sensor 732 communicatively coupled to system controller 720 and positioned within fuel tank 704 to measure a temperature of the fuel 726 and transmit that measurement to system controller 720. Similarly, and in the exemplary embodiment, fuel tank 704 includes an ullage temperature sensor 734 and a fuel tank pressure sensor 736 each communicatively coupled to system controller 720 and positioned to provide a respective temperature and pressure measurement of the ullage region 728 to system controller 720. Alternatively, no fuel tank pressure sensor 736 is included and alternatively may be replaced by an ambient pressure signal from a pre-programmed database aboard vehicle processor 216 shown in FIG. 3.

In the exemplary embodiment, chiller assembly 702 includes a chiller unit 750 used to reduce a temperature of a fluid, for example ullage gas 730 and/or fuel 726, extracted from fuel tank 704. In the exemplary embodiment, chiller unit 750 is a conventional refrigerant-based air chiller that includes an accumulator 752, an evaporator 754 (or heat exchanger), a compressor 756, and a heat exchanger 758 (e.g., a condenser). Alternatively, chiller unit 750 may be any device used to reduce the temperature of a fluid and that enables system 700 to function as described herein. More specifically, and in the exemplary embodiment, chiller unit 750 includes a circular flow path 760 configured such that accumulator 752 is coupled in flow communication with evaporator 754 via a conduit 762. Evaporator 754 is coupled in flow communication with compressor 756, which is coupled in flow communication with heat exchanger 758. Heat exchanger 758 is coupled in flow communication with accumulator 752.

During use, accumulator 752 is sized and oriented to store a quantity of refrigerant 764 at high pressure. Refrigerant flow through conduit 762 is controlled by a control valve 766 positioned along conduit 762. In the exemplary embodiment, when valve 766 is in an open position, refrigerant is channeled to evaporator 754 via conduit 762 and is used to reduce a temperature of a flow of fluid through evaporator 754. Compressor 756 then receives the flow of heated refrigerant from evaporator 754 via conduit 768. Compressor 756 compresses the refrigerant gas to high pressure and the pressurized refrigerant is then channeled to heat exchanger 758 via a conduit 770 and reduces a temperature of the refrigerant using a flow of cooling air 772 (as described in more detail herein), thereby changing the phase of the refrigerant flow from gaseous refrigerant to liquid refrigerant. Liquid refrigerant is then channeled to accumulator 752 via a conduit 774 for storage and/or reuse.

In the exemplary embodiment, cooling air is channeled through condenser by a cooling air fan 776. The cooling air absorbs heat from the high pressure and temperature refrigerant gas and becomes high temperature condenser exhaust-air 778 which is channeled via conduit 780 for discharge at a convenient location. In the exemplary embodiment, cooling air 772 is recycled air from aircraft cabin (not shown FIG. 7). Alternatively, cooling air 772 may be withdrawn from any convenient location ensuring its withdrawal does not compromise fire detection and suppression performance and does not adversely impact equipment and personnel. In the exemplary embodiment, conduit 780 is oriented to discharge the high temperature condenser exhaust-air 778 within the aircraft fuselage 214 (shown in FIG. 3) at a location that will not adversely impact airplane systems and equipment. Alternatively, exhaust air 778 may be exhausted at any convenient location such that inerting system 700 functions as described herein.

In the exemplary embodiment, system controller 720 includes a processor 782 that is programmed to maintain the ullage gas 730 within the inert regime, as described in more detail herein (see for example FIGS. 4-6). System controller 720 is communicatively coupled to chiller assembly 702 and transmits commands to chiller controller 722 to start and shut down chiller assembly 702 based on various environmental measurements received from sensors 732, 734, 736 positioned within fuel tank 704. More specifically, system controller 720 receives data from fuel tank pressure sensor 736 (P_(fuel)), ullage temperature sensor 734 (T_(ullage)), and fuel temperature sensor 732 (T_(fuel)) and determines a Safe Temperature (ST), Chiller Start Temperature (T_(start)), and Chiller Stop Temperature (T_(stop)) using fuel tank pressure (P_(fuel)), as described in more detail herein.

FIG. 8 is a graph 800 illustrating system relevant temperatures as a function of fuel tank pressure for an exemplary fuel. Graph 800 illustrates safe temperatures 810 for an exemplary fuel as a function of fuel tank pressure (P_(fuel)). Graph 800 illustrates the LFL 805 for reference only, to illustrate that safe temperatures have been selected that are lower that LFL 805 to account for operational parameters. In the exemplary embodiment, processor 782 is pre-programmed with safe operating temperatures (ST) 810 for an exemplary fuel. Processor determines ST based upon P_(fuel), as is shown in FIG. 8, and is pre-programmed with a T_(start) 830 and T_(stop) 840 for the chiller assembly 702 (shown in FIG. 7). In the exemplary embodiment, the difference in temperatures T_(start) 830 and T_(stop) 840 represents a dead band and prevents frequent cycling of the chiller assembly 702. Processor compares T_(ullage) with ST to determine whether the fuel tank safety level is within the non-inert region. System controller 720 commands chiller controller 722 to start the chiller assembly 702 when either T_(ullage) or T_(fuel) exceeds T_(start).

More specifically, and in the exemplary embodiment, system controller 720 manages the operation of chiller assembly 702 by comparative analyses of T_(fuel) and T_(ullage) with chiller stop temperature T_(stop) 840 and T_(start) 830 using the following logic. When T_(ullage) is equal to or less than T_(stop) 840 AND T_(fuel) is equal to or less than T_(stop) 840 processor 782 generates a deactivation signal and transmits the signal to chiller controller 722 commanding shut down of chiller assembly 702. As such, chiller assembly 702 is halted when both T_(fuel) AND T_(ullage) are equal to or less than T_(stop) When this condition is satisfied, both T_(fuel) AND T_(ullage) are equal to or less than T_(stop) and also less than ST relative to fuel tank pressure, and therefore the ullage gas is in an inert condition. When T_(ullage) is greater than T_(start) OR T_(fuel) is greater than T_(start), system processor 782 generates a signal and transmits the signal to the chiller controller 722 commanding initiation of the cooling operations. As such, chiller assembly 702 is commanded to operate when either T_(fuel) OR T_(ullage) is greater than T_(start).

FIG. 9 is a schematic illustration of a user interface 900 used with the inerting system 700 shown in FIG. 7. In the exemplary embodiment, processor 782 transmits a signal 910 to user interface 900 that is used to notify an operator when the ullage gas 730 is within the non-inert region, as shown in FIGS. 4-6. As described herein, to determine fuel tank inert/non-inert status, processor 782 compares T_(ullage) with ST and generates signal 910 when T_(ullage) is greater than ST. The above condition indicates that the fuel tank may be unsafe based on the pre-determined ST, as shown in FIG. 8. System controller 720 transmits signal 910 to user interface 900. Transmittal of signal 910 stops when T_(ullage) is equal to or less than ST. The above condition indicates that fuel tank 704 is inert based on the pre-determined ST. Indicator 920, if previously illuminated, is extinguished based on an inert ullage (i.e. safe) determination. User interface includes of a manual switch 930 for manually selecting system 700. When switch 930 is in an ON position, a signal 940 is provided to system controller 720. This commands system controller 720 to operate the system and power chiller assembly 702. An advisory indicator 950 illuminates when chiller assembly 702 fails or malfunctions.

The fuel-air ratio of ullage gas 730 progressively decreases and ullage gas 730 progressively become more inert during chiller assembly 702 operations. In the exemplary embodiment, when temperature of ullage gas 730 become equal to or less than the Safe Temperature, ST, the ullage gas 730 within fuel tank 704 becomes non-combustible. The cooling process described herein continues until system controller 720 commands chiller controller 722 to shut down the chiller assembly 702.

Referring again to FIG. 7, during system operations and in the exemplary embodiment, ullage gas 730 is withdrawn from an outlet 784 of the fuel tank 704 by an electric pump 786 and ullage gas 730 is then channeled to chiller assembly 702 via conduit 706. More specifically, pump 786 is coupled in flow communication with evaporator 754 via conduit 788, and pump 786 facilitates channeling ullage gas 730 to chiller assembly 702 via conduits 706, 788. Chiller assembly 702 reduces a temperature of ullage gas 730 as described herein. Alternatively, fuel 726, or a combination of fuel 726 and ullage gas 730, may be withdrawn from fuel tank 704 and subsequently channeled through chiller assembly 702 to reduce a temperature thereof.

Fuel vapors present in ullage gas 730 flowing through the evaporator 754 condense into liquid fuel during the cooling process. The ullage gas 730 then becomes a chilled “wet” ullage mixture 790. In the exemplary embodiment, chilled “wet” ullage mixture 790 containing both liquid fuel and fuel vapors, is channeled back to the fuel tank 704 via conduit 792 and into a fuel tank inlet 793. A temperature sensor 794 continuously monitors the temperature of chilled “wet” ullage mixture 790 that is channeled from evaporator 754. Temperature sensor 794 is communicatively coupled to chiller controller 722 and provides the measured temperatures thereto. Chiller controller commands valve 766 to provide refrigerant 764 to evaporator 754 to maintain a temperature of the “wet” ullage mixture 790 such that temperature sensed by temperature sensor 794 is at the design evaporator discharge temperature T_(evap).

An internal fuel tank conduit 795 is connected to a discharge element 796 that includes plurality of openings 797 for introducing the “wet” ullage mixture 790 into fuel 726. In the exemplary embodiment, internal conduit 795 has multiple openings to discharge some of “wet” ullage mixture into the ullage region 728 and the fuel region 724. The discharged “wet” ullage mixture in the ullage region cools the ullage gas 730. T_(ullage) is reduced by mixing with the returning chilled “wet” ullage mixture 790. In the exemplary embodiment, discharge element 796 is located near a bottom portion 798 of fuel tank 704. The discharged “wet” ullage mixture 790 bubbles through liquid fuel 726 and T_(fuel) is subsequently reduced by the chilled “wet” ullage mixture 790. System 700 uses chiller assembly 702 to remove heat from fuel tank 704 at a rate greater than the rate at which heat enters the fuel tank 704. Alternatively, “wet” ullage mixture 790 may be introduced into fuel tank 704 in any method that enables system 700 to function as described herein.

In an alternate embodiment of system shown in FIG. 7, fuel temperature sensor 732 is deleted. The system controller 720 controls the operation of chiller assembly 702 by comparative analyses of T_(ullage) with T_(stop) 840 and T_(start) 830 using the following logic. When T_(ullage) is equal to or less than T_(stop) 840, processor 782 generates a deactivation signal and transmits the signal to chiller controller 722 commanding shut down of chiller assembly 702. As such, chiller assembly 702 is halted when T_(ullage) is equal to or less than T_(stop). When this condition is satisfied T_(ullage) is equal to or less than T_(stop) and also less than ST relative to fuel tank pressure, and therefore the ullage gas is in an inert condition. When T_(ullage) is greater than T_(start), system processor 782 generates a signal and transmits the signal to the chiller controller 722 commanding initiation of the cooling operations. As such, chiller assembly 702 is commanded to operate when T_(ullage) is greater than T_(start).

In an alternate embodiment of the exemplary embodiment shown in FIG. 7 and the alternate embodiment discussed above internal fuel tank conduit 795 and discharge element 796 are deleted and the “wet” ullage mixture is discharged directly into the ullage region 728. The discharged “wet” ullage mixture cools the ullage gas 730. T_(ullage) is reduced by mixing with the returning chilled “wet” ullage mixture 790. The ullage gas in turn cools liquid fuel 726 and T_(fuel) is subsequently reduced.

FIG. 10 is a schematic illustration of an alternative embodiment of a system 1000 used to make a fuel tank inert. The operation of this illustrated embodiment, shown in FIG. 10, is similar to the embodiment shown in FIG. 7 and described herein, and similar to alternative embodiments discussed herein. Therefore, like components are similarly numbered therein. System 1000 is similar to system 700, but may additionally incorporate a plurality of adsorbers 1010, 1020 (e.g., activated charcoal) to remove fuel vapors from the extracted ullage gas 730. FIG. 10 shows adsorber 1020 that adsorbs fuel vapors from the ullage gas flowing to chiller assembly 702. This reduces fuel-air ratio of the ullage gas that is cooled outside the fuel tank. FIG. 10 shows adsorber 1010 bring re-activated by a quantity of hot air 1030 discharged by heat exchanger 758 via conduit 1040. A timer (not shown in FIG. 10), part of system controller 720, periodically switches the operational adsorbers by opening and closing a plurality of valves 1060. During operation, adsorbers minimize fuel vapor content of ullage gas 730 flowing through the chiller assembly (i.e. equipment outside of the fuel tank).

FIG. 11 is a schematic illustration of an alternative embodiment of a system 1100 used to make a fuel tank inert. The operation of this illustrated embodiment, shown in FIG. 11, is similar to the embodiment shown in FIG. 7 and described herein. Therefore, like components are similarly numbered therein. System 1100 is similar to the embodiment illustrated in FIG. 7, but incorporates evaporators 1110, 1112 connected in parallel. Evaporators 1110, 1112 are located respectively at the bottom 798 of the fuel tank 704, and the ullage space 730. In the illustrated embodiment, fuel 726 is directly cooled by evaporator 1110 and the ullage is directly cooled by the evaporator 1112. Temperature sensor 794 is positioned to sense temperature of refrigerant returning to the compressor 756. The sensor 794 modulates valve 766 to control a supply of refrigerant to evaporators 1110 and 1112. Refrigerant is channeled to evaporators via conduit 762 though a substantially leak-proof inlet. Moreover, refrigerant is returned to the chiller assembly 702 via conduit 768, through a substantially leak-proof outlet 1116. The refrigerant is supplied to the evaporators via conduit 762. The refrigerant is returned from the evaporators by conduit 768. Items 1114 and 1116 are disconnects used to connect/disconnect internal conduits from the external conduits.

Exemplary embodiments of fuel tank inerting systems are described in detail above. The above-described systems that are used to make a fuel tank inert reduce temperatures of the ullage gas and fuel in an on-board fuel tank of the ullage is reduced and maintained below the fuel's lower flammability limit or in the inert region. To reduce flammability, the methods described herein use fuel properties (flash point temperature), lower flammability limit (LFL), a variation of LFL with fuel tank pressure or altitude, a fuel vapor condensation at low temperature, and/or a further reduction of fuel vapor pressure with decrease in fuel temperature.

Moreover, the system and methods described herein overcome many of the deficiencies realized in a nitrogen-based fuel tank inerting type system. In contrast to fuel tank inerting systems, the system size depends only upon the parameters that cause the inerting issues, i.e. heat input, fuel tank heat transfer characteristics and fuel-tank pressure change and does not depend on fuel tank volume as is the case with the inerting systems. Additionally, aircraft descent rate does not impact system design as it may do in an inerting system. For example, during descent, outside ambient air enters a vented fuel tank to re-pressurize the fuel tank. At high altitudes outside air is at temperatures substantially lower than the safe temperature (ST) and may supplement fuel tank cooling. Furthermore, the system and methods described herein require no engine bleed-air as feedstock as is required by an on-board inert gas (nitrogen enriched air) generating system. As such, the system has substantially high efficiency compared to an inerting system. The system requires only electrical power for its operation, and requires no major changes to existing systems and re-certification of existing systems. Therefore, non-recurring costs of the disclosed systems may be substantially lower compared to inerting systems, which require changes to the engine bleed-air system, air-conditioning system ram-air system, and/or duct leak detection system.

Although the foregoing description contains many specifics, these should not be construed as limiting the scope of the present disclosure, but merely as providing illustrations of some of the presently preferred embodiments. Similarly, other embodiments may be devised which do not depart from the spirit or scope of the present disclosure. Features from different embodiments may be employed in combination. The scope of the disclosure is, therefore, indicated and limited only by the appended claims and their legal equivalents, rather than by the foregoing description. All additions, deletions and modifications as disclosed herein which fall within the meaning and scope of the claims are to be embraced thereby.

Although the apparatus and methods described herein are described in the context of enhancing safety levels by making ullage regions within aircraft fuel tanks inert, it is understood that the apparatus and methods are not limited to aerospace applications. Likewise, the system components illustrated are not limited to the specific embodiments described herein, but rather, system components can be utilized independently and separately from other components described herein.

As used herein, an element or step recited in the singular and proceeded with the word “a” or “an” should be understood as not excluding plural elements or steps, unless such exclusion is explicitly recited. Furthermore, references to “one embodiment” of the present disclosure are not intended to be interpreted as excluding the existence of additional embodiments that also incorporate the recited features.

This written description uses examples to support the claims, including the best mode, and also to enable any person skilled in the art to practice the disclosure, including making and using any devices or systems and performing any incorporated methods. The patentable scope of the disclosure is defined by the claims, and may include other examples that occur to those skilled in the art. Such other examples are intended to be within the scope of the claims if they have structural elements that do not differ from the literal language of the claims, or if they include equivalent structural elements with insubstantial differences from the literal languages of the claims. 

1. A fuel tank safety system comprising: a chiller assembly coupled in flow communication with a vehicle fuel tank, the fuel tank comprising a fuel region including a quantity of fuel, and an ullage region including a quantity of ullage gas, said chiller assembly comprising: a pump configured to extract a quantity of a fluid from the vehicle fuel tank; an evaporator configured to receive a flow of the extracted quantity of fluid from said pump and further configured to reduce a temperature of the fluid; a chiller controller configured to activate and deactivate said pump; a system controller operatively coupled to said chiller controller, said system controller configured to transmit to said chiller controller one of a start signal to start chiller assembly operations or a stop signal to stop chiller assembly operations.
 2. A system in accordance with claim 1, wherein the extracted fluid is at least one of a quantity of fuel or a quantity of ullage gas.
 3. A system in accordance with claim 2 further comprising a distribution element positioned within the fuel tank configured to disperse the reduced temperature fluid into at least one of the quantity of fuel and the quantity of ullage contained within the fuel tank, wherein the reduced temperature fluid facilitates reducing a temperature of the fuel and a temperature of the ullage gas contained within the fuel tank.
 4. A system in accordance with claim 1 further comprising a user interface operatively coupled to said chiller controller, said user interface comprising a switch configured to manually select and deselect said chiller assembly.
 5. A system in accordance with claim 1 further comprising: a first temperature sensor communicatively coupled to said system controller, said first temperature sensor configured for temperature measurement of the ullage region; a second temperature sensor communicatively coupled to said system controller, said second temperature sensor configured for temperature measurement of the fuel region; and a pressure sensor communicatively coupled to said system controller, said pressure sensor configured to measure a pressure within the fuel tank.
 6. A system in accordance with claim 5 wherein said system controller comprises a processor programmed to: receive data from said pressure sensor and said first and second temperature sensors; determine a safe temperature of the fuel tank based on the pressure within the fuel tank; compare the temperature of the ullage region and the temperature of the fuel region with a chiller start temperature and a chiller stop temperature; transmit an activation signal to said chiller controller if the temperature of the ullage region is greater than the chiller start temperature or the temperature of the fuel region is greater that the chiller start temperature; and transmit a de-activation signal to said chiller controller if the temperature of the ullage region is less than or equal to the chiller stop temperature.
 7. A system in accordance with claim 6 further comprising an advisory indicator, and wherein said processor is further programmed to transmit an activation signal to said user interface to activate said advisory indicator if the temperature of the ullage region is greater than the safe temperature.
 8. A system in accordance with claim 1 further comprising at least one adsorber coupled upstream from said pump and configured to remove at least a portion of residual fuel vapors from the extracted quantity of ullage gas.
 9. A system in accordance with claim 1, wherein said evaporator is positioned within the fuel tank and configured to reduce a temperature of the fuel and ullage regions.
 10. A vehicle comprising: a fuel tank comprising a fuel region including a quantity of fuel, and an ullage region including a quantity of ullage gas; and a fuel tank safety system operatively coupled to said fuel tank, said fuel tank safety system comprising: a chiller assembly coupled in flow communication with said fuel tank, said chiller assembly comprising: a pump configured to extract a quantity of a fluid from the vehicle fuel tank; an evaporator configured to receive a flow of the extracted quantity of fluid from said pump and further configured to reduce a temperature of the fluid; a chiller controller configured to activate and deactivate said pump; a system controller operatively coupled to said chiller controller, said system controller configured to transmit to said chiller controller one of a start signal to start chiller assembly operations or a stop signal to stop chiller assembly operations.
 11. A vehicle in accordance with claim 10, wherein the extracted fluid is at least one of a quantity of fuel or a quantity of ullage gas.
 12. A vehicle in accordance with claim 11 further comprising a distribution element positioned within the fuel tank configured to disperse the reduced temperature fluid into at least one of the quantity of fuel and the quantity of ullage gas contained within the fuel tank, wherein the reduced temperature fluid facilitates reducing a temperature of the fuel and a temperature of the ullage gas contained within the fuel tank.
 13. A vehicle in accordance with claim 10 further comprising a user interface operatively coupled to said chiller controller, said user interface comprising a switch configured to manually select and deselect said chiller assembly.
 14. A vehicle in accordance with claim 10 further comprising: a first temperature sensor communicatively coupled to said system controller, said first temperature sensor configured for temperature measurement of the ullage region; a second temperature sensor communicatively coupled to said system controller, said second temperature sensor configured for temperature measurement of the fuel region; and a pressure sensor communicatively coupled to said system controller, said pressure sensor configured to measure a pressure within the fuel tank.
 15. A system in accordance with claim 14 wherein said system controller comprises a processor programmed to: receive data from said pressure sensor and said first and second temperature sensors; determine a safe temperature of the fuel tank based on the pressure within the fuel tank; compare the temperature of the ullage region and the temperature of the fuel region with a chiller start temperature and a chiller stop temperature; transmit an activation signal to said chiller controller if the temperature of the ullage region is greater than the chiller start temperature or if the temperature of the fuel region is greater that the chiller start temperature; and transmit a de-activation signal to said chiller controller if the temperature of the ullage region is less than or equal to the chiller stop temperature and if the temperature of the fuel region is less than or equal to the chiller stop temperature.
 16. A vehicle in accordance with claim 15 further comprising an advisory indicator, and wherein said processor is further programmed to transmit an activation signal to said user interface to activate said advisory indicator if the temperature of the ullage region is greater than the safe temperature.
 17. A vehicle in accordance with claim 10 further comprising at least one adsorber coupled upstream from said pump and configured to remove at least a portion of fuel vapors from the extracted quantity of ullage gas.
 18. A system in accordance with claim 10 wherein said evaporator is positioned within the fuel tank and configured to reduce a temperature of the extracted fluid.
 19. A method for making a fuel tank inert, said method comprises: channeling a quantity of ullage gas from the fuel system; reducing a temperature of the extracted quantity of ullage gas; and returning the reduced temperature ullage gas into the fuel system.
 20. A method in accordance with claim 19 wherein returning the reduced temperature ullage gas into the fuel system further comprises dispersing the reduced temperature ullage gas into at least one of a quantity of fuel and a quantity of ullage contained within the fuel tank, wherein the reduced temperature fluid facilitates reducing a temperature of the fuel and a temperature of the ullage gas contained within the fuel tank.
 21. A method in accordance with claim 19 further comprising: determining a safe temperature of the fuel tank based on a pressure within the fuel tank; comparing the temperature of the ullage region and the temperature of the fuel region with a chiller start temperature and a chiller stop temperature; transmitting an activation signal to said chiller controller if the temperature of the ullage region is greater than the chiller start temperature or if the temperature of the fuel region is greater that the chiller start temperature; and transmitting a de-activation signal to said chiller controller if the temperature of the ullage region is less than or equal to the chiller stop temperature and if the temperature of the fuel region is less than or equal to the chiller stop temperature. 